Blocked networks do not work

Forum|Forum|6 years ago
June 10, 2020
5 replies
5775 views

hi, a few weeks ago I started to receive attacks on all my servers nated by fortinet, I tried to block the attacking ip or networks but it does not work, the ip continue to attack and the fortinet does not work.

1.jpg

Best answer by Dave_Hall

You likely want to use local-in-policy if you do not want unwanted traffic hitting (or passing) your fgt's WAN(s) ports.

Here is an example:

config firewall address edit "China-Country" set type geography set associated-interface "wan1" set country "CN" next end config firewall addrgrp edit "block-ingress-group" set member "China-Country" end config firewall local-in-policy edit 1 set intf "wan1" set srcaddr "block-ingress-group" set dstaddr "all" set service "ALL" set schedule "always" next end

Dave_HallAnswer

New Member

You likely want to use local-in-policy if you do not want unwanted traffic hitting (or passing) your fgt's WAN(s) ports.

Here is an example:

config firewall address edit "China-Country" set type geography set associated-interface "wan1" set country "CN" next end config firewall addrgrp edit "block-ingress-group" set member "China-Country" end config firewall local-in-policy edit 1 set intf "wan1" set srcaddr "block-ingress-group" set dstaddr "all" set service "ALL" set schedule "always" next end